Privacy Policy

This policy applies from the day it is published on this page. 1. Who we are eRevola is run by eRevola (business registration in progress) ("eRevola", "we", "us"), Road 1, Hargeisa, Somaliland. Contact: support@erevola.com, +252 63 9340000. Support hours: Saturday to Thursday, 08:00–21:00 (Hargeisa time). This policy explains what personal data the eRevola website and app collect, why, who receives it, how long we keep it, and how you can delete it. It applies to customers, sellers (stores) and Share & Earn members. 2. Data we collect • Account: your name, phone number, country and city, an optional e-mail address (website only) and your password. We store the password only as a secure hash. Optional: a profile photo. • Orders: delivery address, recipient name and phone number, delivery notes, the items you buy, the payment method and the currency. • Payments: the transaction reference you enter (optional), a photo of the payment receipt if you upload one, the currency you pay in (US dollars or Somaliland shillings), and the amounts fixed with your order. We do not process or store card numbers. • Saved details (optional): addresses, mobile money or bank account numbers for faster checkout, and your wishlist. • Returns, warranty claims and reviews: what you write and the photos you upload. We remove location data (EXIF / GPS) from return and claim photos. • Order chat and support: messages and files you send to a store about an order, or to our support team. If you contact support without an account, your name and phone number are stored encrypted. • Share & Earn (optional): your referral code, visits and orders that come through your links, your payout account and your withdrawal requests. • Sellers: business details, the owner's ID, store locations, store staff accounts and payout accounts, checked when the store applies. • Security and device data: IP address, browser or app version, a random device identifier, an approximate country and city worked out from the IP address on our own server, and your sign-in history. To stop mass sign-ups, we count new accounts per network and per device for up to one day. To spot duplicate accounts, we keep only a keyed fingerprint (hash) of your device, network, phone number and street address, never a second copy of the raw value. • App only: a push notification token, if you allow notifications. The app does not ask for your precise location, your contacts, your camera, your microphone or access to the photos on your phone: you pick each file you want to send yourself. We do not use advertising or analytics trackers, and we do not read an advertising ID. 3. Why we use your data, and on what basis • To provide the service you signed up for (contract): – create your account, sign you in, and send verification codes by WhatsApp or SMS; – take, check, pay for, prepare and deliver your orders, and handle returns, refunds and warranty claims; – run Share & Earn, pay your earnings, and pay sellers; – answer support requests. • To keep eRevola safe (our legitimate interest): check payments, prevent fraud (for example duplicate receipts, self-referral, multiple accounts, mass sign-ups) and keep the service secure. • Marketing messages, if we send any (your consent): you can withdraw your consent at any time. • Accounting and legal duties (legal obligation). 4. Who receives your data • Stores (sellers): see the items, the delivery city and an anonymous buyer label. They never see your name, phone number or address. They see the messages you send them in order chat; phone numbers and other contact details are blocked there. • Delivery: our own delivery staff receive the name, phone number and address needed to deliver your order. • eRevola staff: only the staff whose job needs it, with access set by role. Staff access to personal data is logged. • Share & Earn members: never see who bought through their link. • Payment providers: you pay through Zaad, under its own terms. We only see the reference and receipt you give us. • Service providers that help us run eRevola: – server hosting: Hostinger (servers in Germany) – Meta (WhatsApp Business) for verification codes, and an SMS provider if we use SMS – Expo, for app push notifications – Google Drive, for encrypted backups These providers are outside Somaliland. • Authorities, when the law requires it. Reviews you write are public on the product page, with a short form of your name. We do not sell your personal data. 5. How long we keep it • Account data: while your account is open. • Deleted accounts: closed at once and erased after 30 days (see section 7). Orders, invoices and earnings are kept for accounting for 7 years, without your name or phone number. After that, the remaining personal details (payment receipts, claim and review photos and texts, order notes) are removed. Orders themselves stay, anonymous. • Sign-in log: the phone number or e-mail you signed in with is removed after 12 months. • Support messages: the text is kept for our records. When you delete your account, it is no longer linked to you. Blocked messages (for example, ones that shared contact details) lose their original text after 90 days. • Backups: kept for up to 30 days. 6. Security • All data between the app or website and our servers is encrypted in transit (HTTPS). • Passwords are hashed. • Two-factor authentication (Google Authenticator) is available, and it is required for Share & Earn withdrawals and for staff. • Sensitive fields and backups are encrypted. • Staff access is logged. • Never share your password or a verification code with anyone, including a store. eRevola staff will never ask you for them. No system is perfectly secure. If you think someone used your account, contact us at once. 7. Your rights and choices • See and correct your details in My Account. • Delete your account: in the app, Account → Delete account; on the website, My Account → Account settings → Delete account, or without the app at https://www.erevola.com/account/delete. You confirm with your password or a WhatsApp code. – Your account is closed at once and erased after 30 days. Signing in within those 30 days cancels the deletion. – We cannot delete an account while it has an open order, a withdrawal in progress, or Share & Earn money still on hold. Money you can already withdraw is paid out to you first, whatever the amount. • Get a copy of your data: e-mail us at support@erevola.com from your account's e-mail, or tell us your account phone number. We check that the request is yours and send you a copy by e-mail. • Notifications: you can switch off app notifications in Account → Notification settings or in your phone's settings. • Complaints: contact us first at support@erevola.com or +252 63 9340000, and we will try to solve it. 8. Children eRevola is only for people aged 18 or older. Do not create an account if you are under 18. If we learn that an account belongs to someone under 18, we close it. 9. Cookies The website uses only the cookies and browser storage it needs to work: keeping you signed in, your cart, your language and currency, and the Share & Earn link you opened. There are no advertising or analytics cookies. 10. Changes When we change this policy, we update the date shown on this page. If a change is important, we also tell you in the app or on the website.